FedRAMP Consolidated Rules (2026) 2026.07.14.01
Published 2026-07-14
Snapshot taken 2026-10-15 15:31 · rules source
Snapshot taken 2026-10-15 15:31 · rules source
Why this release, in the publisher's words
FedRAMP's change notes dated 2026-07-14 (version 2026.07.14.01): Clarified that providers MUST address the Key Security Indicators even if they intend to pursue a Rev 5 Program Certification path in the future. Update guidance to direct users to the latest NIST Digital Identity Guidelines and remove references to specific instances of SP 800-63.
https://github.com/FedRAMP/rules/commits/main/fedramp-consolidated-rules.jsonRead every requirement in this version · All versions of FedRAMP Consolidated Rules (2026)